$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft File: O9PjKvOv0JXELXIXKlnGWfMty-c.mft (raw, json) Hash identifier: U/PnE3noK9U5ZqaqxzqeloJNRR1L6yX3v6+Al1+nyJk= Subject key identifier: 53:3A:15:FB:53:D4:2B:B4:EA:A0:C2:D2:8E:BC:13:81:38:17:15:9E Authority key identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 Certificate issuer: /CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7 Certificate serial: 04F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft Manifest number: 04F8 Signing time: Fri 22 Nov 2024 20:20:47 +0000 Manifest this update: Fri 22 Nov 2024 20:20:47 +0000 Manifest next update: Sat 23 Nov 2024 02:20:47 +0000 Files and hashes: 1: O9PjKvOv0JXELXIXKlnGWfMty-c.crl (hash: 6iLndZJOJ57RMVmmQ5WYG5BDfR8FJNrtsXPKgIhOdNg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7 Validity Not Before: Nov 22 20:20:47 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=533A15FB53D42BB4EAA0C2D28EBC13813817159E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:cf:25:50:1a:42:a3:09:7d:f1:1d:ce:22: 30:fe:69:11:43:4d:67:ce:78:dd:6e:48:54:3e:a9: 44:24:60:8b:bb:11:98:3f:6b:4f:dd:3f:5d:be:55: 78:eb:42:ed:96:31:ff:e8:60:9f:ff:51:8c:c7:e7: 4b:e9:95:46:3e:ce:db:19:90:1b:65:c7:15:ab:75: d5:03:2f:2c:ba:a7:b7:65:ec:7f:f7:d4:6c:d4:a2: 3c:67:dc:a8:04:a8:d5:c5:59:5f:3c:3d:dc:ca:31: 37:76:6c:2f:38:d3:68:c4:2d:ca:b8:c4:ab:c8:cd: 40:f4:05:f9:97:01:e3:44:2e:69:2c:6d:69:31:19: 0c:f1:4a:fe:a2:90:49:34:0e:fe:bf:67:b7:76:00: f3:73:88:1d:f4:19:7b:3a:0b:83:7b:12:d6:f3:55: ce:53:9d:52:da:b3:3f:6f:88:cc:0c:50:53:48:0c: 62:56:42:7e:2b:97:bf:31:0e:0d:1c:15:92:14:7b: 11:18:95:30:f4:6e:ee:f9:24:2e:a2:0d:68:cf:34: f5:24:65:b8:c4:70:93:eb:03:ea:af:39:92:37:4a: 63:82:31:15:6d:5d:21:d4:e1:80:5d:db:a6:d4:24: 0d:4d:95:48:51:97:0f:76:c2:a0:e6:97:7d:27:31: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3A:15:FB:53:D4:2B:B4:EA:A0:C2:D2:8E:BC:13:81:38:17:15:9E X509v3 Authority Key Identifier: keyid:3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:dd:f0:08:90:6f:05:bd:fc:50:c9:7d:cb:f8:ca:d5:2f:69: 5f:26:c8:8f:30:29:2d:68:64:90:50:13:ea:52:7e:72:e4:ac: 17:4f:75:1a:74:cd:e2:7d:ee:6f:f1:28:1d:f2:83:3a:2f:fd: 40:2b:9e:32:51:c1:f1:27:02:9a:f7:75:38:ab:5f:e9:fe:eb: b5:f6:ba:cb:72:ab:19:e5:bf:da:44:d6:f1:e2:8d:87:f8:3e: 3a:de:74:0d:ff:d7:8d:e3:9b:81:a3:9f:b5:00:04:aa:92:20: df:14:ee:c6:fe:b0:16:39:3e:5c:2b:f2:48:78:d8:bf:45:98: bd:2c:12:9d:03:09:03:36:2c:56:31:3e:33:11:da:ed:cf:88: 90:a6:b3:f9:9d:a9:c3:6a:83:96:81:06:0d:69:38:8e:78:b3: c7:d5:48:4e:e1:0e:14:91:e5:c6:79:5e:8b:5e:3e:84:92:b5: 19:9a:cc:8a:15:68:84:5a:58:25:63:fa:c6:57:cc:f8:8b:e3: bc:83:f8:b8:09:82:c7:66:b7:43:56:0b:7f:50:b6:a3:61:c4: f0:fe:54:5a:9e:66:ed:92:bd:7c:e0:1a:cb:9e:02:c9:1c:cd: 46:ec:3b:a2:e7:4b:38:bb:52:c6:4e:6a:51:4e:eb:02:ed:d5: 07:bc:e3:4d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JE M0UzMkFGM0FGRDA5NUM0MkQ3MjE3MkE1OUM2NTlGMzJEQ0JFNzAeFw0yNDExMjIy MDIwNDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzM0ExNUZCNTNENDJC QjRFQUEwQzJEMjhFQkMxMzgxMzgxNzE1OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiYc8lUBpCowl98R3OIjD+aRFDTWfOeN1uSFQ+qUQkYIu7EZg/ a0/dP12+VXjrQu2WMf/oYJ//UYzH50vplUY+ztsZkBtlxxWrddUDLyy6p7dl7H/3 1GzUojxn3KgEqNXFWV88PdzKMTd2bC8402jELcq4xKvIzUD0BfmXAeNELmksbWkx GQzxSv6ikEk0Dv6/Z7d2APNziB30GXs6C4N7EtbzVc5TnVLasz9viMwMUFNIDGJW Qn4rl78xDg0cFZIUexEYlTD0bu75JC6iDWjPNPUkZbjEcJPrA+qvOZI3SmOCMRVt XSHU4YBd26bUJA1NlUhRlw92wqDml30nMTdZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUzoV+1PUK7TqoMLSjrwTgTgXFZ4wHwYDVR0jBBgwFoAUO9PjKvOv0JXELXIX KlnGWfMty+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MC9POVBqS3ZPdjBKWEVMWElYS2xuR1dmTXR5LWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL085UGpLdk92MEpYRUxYSVhLbG5HV2ZNdHktYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzAvTzlQakt2T3YwSlhF TFhJWEtsbkdXZk10eS1jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFnd8AiQbwW9/FDJfcv4ytUvaV8myI8wKS1oZJBQE+pSfnLkrBdPdRp0zeJ9 7m/xKB3ygzov/UArnjJRwfEnApr3dTirX+n+67X2ustyqxnlv9pE1vHijYf4Pjre dA3/143jm4Gjn7UABKqSIN8U7sb+sBY5Plwr8kh42L9FmL0sEp0DCQM2LFYxPjMR 2u3PiJCms/mdqcNqg5aBBg1pOI54s8fVSE7hDhSR5cZ5XotePoSStRmazIoVaIRa WCVj+sZXzPiL47yD+LgJgsdmt0NWC39QtqNhxPD+VFqeZu2SvXzgGsueAskczUbs O6LnSzi7UsZOalFO6wLt1Qe8400= -----END CERTIFICATE-----Generated at Fri Nov 22 21:14:11 2024 by rpki-client on console-fra.rpki-client.org